20/06/2025
Biggest all-time leak, 16 *BILLION* stolen passwords are now floating online! 🤯
- Cybernews researchers uncovered 30 exposed datasets totalling 16 billion Apple, Google, Facebook and other logins.
- Individual dumps range from 16 million to 3.5 billion credentials, average 550 million each.
- Records came from fresh infostealer-malware logs plus repackaged breaches, containing passwords, tokens and cookies.
- Data sat briefly on misconfigured Elasticsearch and object-storage servers; owners remain unknown.
- Only the 184 million-record May database was known before; the other 15.8 billion credentials are new.
- Experts warn the trove is “a blueprint for mass exploitation” enabling phishing, account takeover and ransomware.
- The haul outstrips Have I Been Pwned’s 15 billion-account archive, making it the largest confirmed leak yet.
- Action plan: change passwords, adopt a manager or passkeys, enable MFA; firms should enforce zero-trust and strict privileged-access controls.
Treat this as a fire drill: tighten your logins today or risk handing crooks the keys to your digital life.